Privacy Policy

What we collect. When you apply: your name and email (from Google sign-in), and the details you enter — country, city, language, WhatsApp number, business information.

Why. To review your application, operate partner services, and issue and verify your Partner Certificate.

Legal basis. We process your data on the basis of your consent (given when you submit the application form) and, once your membership is approved, for the performance of the partner relationship you have entered into with us.

Messaging contacts (WhatsApp, Instagram, email). If you contact MK1 by WhatsApp or another messaging channel, we keep your phone number, the display name you use, the country indicated by your number, your language, the vehicle requirements and the messages you send us in our partner CRM, so that we can answer you and follow up on your request. We link these records with your partner account by phone number or email. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in keeping an accurate record of our business communications.

Processors outside Korea. To operate messaging and to draft replies, some of this data is processed on our behalf by Meta Platforms (WhatsApp Business Platform / Cloud API — message delivery and hosting), Anthropic PBC (USA — AI-assisted drafting and extraction of request details from conversations) and Google LLC (sign-in). These providers process data only under our instructions and do not use it for their own purposes. Transfer takes place when a message is received or sent. You may object to AI-assisted processing by writing to kevin@mk1.co.kr; we will then handle your conversation manually.

Where — international transfer. MK1 is established in the Republic of Korea. MK1's records are stored on MK1's server in the Republic of Korea; the processors listed above process data transiently outside Korea. If you apply from outside Korea — including from Albania, Kosovo, the United Arab Emirates, Saudi Arabia or any other country — submitting the form transfers your data to Korea. Transferred items: name, email, country, city, language, WhatsApp number and the business information you enter. Purpose: reviewing your application and operating partner services. Retention: as stated below. Legal basis for the transfer: your separate consent given at the point of application. We do not sell your data, and we do not share it with third parties other than the processors listed above, except as required by law. You may refuse the transfer, but as our servers are in Korea we would then be unable to process your application.

Cookies and analytics (members.mk1.co.kr and cars.mk1.co.kr). Strictly necessary. When you sign in to the partner area we set a sign-in cookie (mk1s) that keeps you signed in for up to 30 days. It is needed for the service to work and does not require consent. Analytics, only with your consent. On the public pages of members.mk1.co.kr (home, services, terms, this policy, and their Albanian and Arabic versions) and on cars.mk1.co.kr we use Google Analytics (Google LLC, USA) only if you choose "Accept" in the cookie banner. Until you choose, nothing from Google Analytics loads on your device. If you accept, Google sets the cookies _ga and _ga_<ID> for up to 2 years and records the pages you view, the site you came from, your browser and device type, and your approximate location (country and region), so that we can count visits and see which pages are useful. We do not use it for advertising: Google signals and ad personalisation are turned off and no advertising account is linked to it. Analytics data is kept in Google Analytics for 2 months and then deleted automatically. We do not use Google Analytics on the application form, the partner dashboard, the sourcing request page, the certificate-verification page or the Korean-language partner area (/kr/).

International transfer of analytics data. If you accept analytics, Google LLC (United States) receives the analytics data described above, on servers in the United States and other countries, at the moment a page loads, under Google's data processing terms (how Google uses the data: policies.google.com/technologies/partner-sites). Purpose: counting visits and improving the sites. Retention: 2 months. If you refuse, nothing is sent to Google.

Your cookie choices. Choose "Reject" in the banner, or open "Cookie settings" (the link at the bottom of the page) to change your choice at any time. You can also delete cookies in your browser or install Google's opt-out add-on. Refusing has no effect on your use of the sites. Your choice is saved in your browser (local storage, not a cookie) for 12 months, after which we ask again.

Verification page. The public certificate-verification page shows only: partner name, company, country, certificate number, status and dates. Contact details are never shown.

Retention & deletion. Data is kept while your membership is active and for one year after it ends or after your last contact with us, whichever is later, so that we can verify certificates that are still in circulation. After that period it is deleted. Application data of applicants who are not approved is deleted within six months of the decision.

Your rights. You may at any time request access to your data, correction of inaccurate data, deletion, restriction of processing, or a copy of your data in a portable format, and you may object to processing or withdraw your consent — withdrawal does not affect processing already carried out. Email kevin@mk1.co.kr. If you are in Albania or Kosovo you may also lodge a complaint with your national data protection authority; if you are in Korea, with the Personal Information Protection Commission.

Controller: MK1 (마크원), Republic of Korea · kevin@mk1.co.kr